Suspicious URL inspector
Pulls a reported URL apart and names what is odd about it: punycode, mixed scripts, a lookalike of a brand you care about, credentials smuggled into the authority, a shortener, an IP for a hostname. It does not fetch the URL and it does not judge for you. It gives an analyst the sentence they need for the ticket.
Everything you type stays in this tab. Share copies a link, never your inputs, unless the tool says it encodes them in the URL.
Defanged forms are understood: hxxp, [.], [:] and (dot) are normalised before parsing.
Edit-distance and substring checks run against this list.
Nothing here is a verdict. A brand-new domain with a hyphen is not automatically malicious and a clean-looking URL is not automatically safe. This is a checklist that runs faster than you can.